I was speaking at the UKOUG Unix SIG in the Institute of Physics yesterday about Oracle Security. The talk focused on the different types of threats an Oracle database may come under, where to find information and tools. I also gave some examples of how to exploit Oracle, talked about various tools and demonstrated some of them and then I talked about how you might audit a database for vulnerabilities, some ideas on how to use the audit features of Oracle and also how to secure a database. I felt the talk went quite well and I had changed it quite a bit since last time I gave it. I removed some slides, added new ones to cover recent advances in Oracle security and also changed the text on most of the slides to enhance them. I also prepared almost all of the examples shown in the slides so that I could demonstrate them live.
I have passed the slides to the UKOUG for publishing on their site but the latest updated slides are also available as a presentation titled "Many ways to become DBA"
Blog
Pete Finnigan's Oracle Security Weblog
This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.
[Previous entry: "Details published about the mod_plsql 0-day bug"] [Next entry: "An argument rages in the ePress between Oracle and Litchfield"]
January 2006
- Niall has a good post - DBA as User - 01/05/2006 by 01/05/2006
- up front security - 01/06/2006 by 01/06/2006
- A tiny digital camera - 01/07/2006 by 01/07/2006
- Oracle 'Worm' Exploit Gets Ominous Tweak - 01/08/2006 by 01/08/2006
- Justin talks about a new series of papers on Oracle security by Arup - 01/09/2006 by 01/09/2006
- Howard has some good advice on protecting against worms - 01/10/2006 by 01/10/2006
- Doug has posted an intersting note about executing of SQL script from URL's - 01/12/2006 by 01/12/2006
- Oracle is finally listening to customers about fix times and security patch quality - 01/14/2006 by 01/14/2006
- Interview with Oracle's security chief - 01/16/2006 by 01/16/2006
- Red Database Security has released 5 Oracle security bug advisories - 01/17/2006 by 01/17/2006
- Alex has added advisories for 23 security bugs fixed in 10g Release1 - 01/19/2006 by 01/19/2006
- Alex has produced a detailed analysis of the Jan 2006 CPU - 01/22/2006 by 01/22/2006
- Duncan Harris speaks on Oracle Security - 01/24/2006 by 01/24/2006
- Oracle is advising customers to patch the last CPU very quickly - 01/25/2006 by 01/25/2006
- An argument rages in the ePress between Oracle and Litchfield - 01/27/2006 by 01/27/2006
- Gartner: Oracle no longer a bastion of security - 01/30/2006 by 01/30/2006
- How to connect to the database using Perl - with two way communication - 01/31/2006 by 01/31/2006
Archives
Syndication
Powered by gm-rss 2.0.0
